From 5df92bba514e00fe1d614fd06d89b213ebc49121 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Tue, 8 Apr 2008 12:53:36 +0000 Subject: [PATCH] changed force_encap to forceencaps --- src/starter/ipsec.conf.5 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/starter/ipsec.conf.5 b/src/starter/ipsec.conf.5 index bb108ca63..b0b91643e 100644 --- a/src/starter/ipsec.conf.5 +++ b/src/starter/ipsec.conf.5 @@ -373,7 +373,7 @@ for the connection, e.g. (encryption-integrity-[dh-group]). If dh-group is specified, CHILD_SA setup and rekeying include a separate diffe hellman exchange (IKEv2 only). .TP -.B force_encap +.B forceencaps Force UDP encapsulation for ESP packets even if no NAT situation is detected. This may help to hurdle restrictive firewalls. To enforce the peer to encapsulate packets, NAT detection payloads are faked (IKEv2 only).